From 642679f44295547143e415afc23fa0fb48c2993a Mon Sep 17 00:00:00 2001
From: Hermes <hermes@hermes.local>
Date: Sat, 6 Jun 2026 17:45:24 +0000
Subject: [PATCH] feat: add Traefik file-provider routes for bazarr, tdarr,
 stash, unpackerr

---
 infrastructure.org | 63 ++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 63 insertions(+)

diff --git a/infrastructure.org b/infrastructure.org
index 88bd278..5c9b7e9 100644
--- a/infrastructure.org
+++ b/infrastructure.org
@@ -1,3 +1,6 @@
+:PROPERTIES:
+:CREATED:  [2026-05-11 Mon]
+:END:
 #+TITLE: Infrastructure Documentation — gharbeia.net
 #+AUTHOR: Amr Gharbeia
 #+DATE: 2026-05-15
@@ -337,6 +340,28 @@ http:
         - security-headers@file
         - traefik-bouncer@file
 
+    tdarr:
+      rule: "Host(`tdarr.gharbeia.net`)"
+      service: tdarr-internal
+      entryPoints:
+        - tunnel
+        - secureweb
+      middlewares:
+        - authentik-forwardauth@file
+        - security-headers@file
+        - traefik-bouncer@file
+
+    stash:
+      rule: "Host(`stash.gharbeia.net`)"
+      service: stash-internal
+      entryPoints:
+        - tunnel
+        - secureweb
+      middlewares:
+        - authentik-forwardauth@file
+        - security-headers@file
+        - traefik-bouncer@file
+
     # -- *arr Suite -------------------------------------------------
 
     radarr:
@@ -416,6 +441,17 @@ http:
         - security-headers@file
         - traefik-bouncer@file
 
+    bazarr:
+      rule: "Host(`bazarr.gharbeia.net`)"
+      service: bazarr-internal
+      entryPoints:
+        - tunnel
+        - secureweb
+      middlewares:
+        - authentik-forwardauth@file
+        - security-headers@file
+        - traefik-bouncer@file
+
     # -- Downloaders ------------------------------------------------
 
     sabnzbd:
@@ -451,6 +487,17 @@ http:
         - security-headers@file
         - traefik-bouncer@file
 
+    unpackerr:
+      rule: "Host(`unpackerr.gharbeia.net`)"
+      service: unpackerr-internal
+      entryPoints:
+        - tunnel
+        - secureweb
+      middlewares:
+        - authentik-forwardauth@file
+        - security-headers@file
+        - traefik-bouncer@file
+
     # -- Homepage / Dashboards --------------------------------------
 
     homepage:
@@ -760,6 +807,22 @@ http:
       loadBalancer:
         servers:
           - url: http://tubearchivist:8000    # standalone, no longer behind gluetun on port 8000 inside gluetun
+    bazarr-internal:
+      loadBalancer:
+        servers:
+          - url: http://bazarr:6767
+    tdarr-internal:
+      loadBalancer:
+        servers:
+          - url: http://tdarr:8265
+    stash-internal:
+      loadBalancer:
+        servers:
+          - url: http://stash:7777
+    unpackerr-internal:
+      loadBalancer:
+        servers:
+          - url: http://unpackerr:5656
 #+END_SRC
 
 All 28 routers follow the same pattern. The service URLs point to Docker DNS